Re: getting spammed on bugzilla

[Carlos O'Donell <carlos@redhat.com>]

On 11/12/21 03:55, Mark Wielaard via Overseers wrote:
> Hi,
> 
> On Fri, Nov 12, 2021 at 08:40:33AM +0400, Joel Brobecker via Overseers wrote:
>> My thinking on this is that we should try doing the same for
>> sourceware's bugzilla, and see how it goes. I'm hoping the extra
>> step will be a high enough barrier that it'll encourage the majority
>> of spammers to find somewhere else to go. Even if not perfect, if
>> we can block the majority of spam, that'll already be a great win
>> for us.
> 
> I don't like it, but I don't see another solution.  I did tweak the
> spam filters to count http[s]:// and reject any comments containing
> 10+ urls. That seems to have worked a little. But soon after we saw
> even more spam comments that simply use 1 url (and copy/paste some
> earlier comment text). Currently I am blocking ~3 users and tagging
> ~10 comments as spam a day. Which isn't really productive use of my
> time, and not really sustainable. So unless someone knows a better way
> of automatically detecting spam bugzilla comments and blocking users
> that post them I am afraid we will have to restrict who can sign up
> for a bugzilla account or explicitly approve first time bug posters.

I'd say we disable new account creation.

It saddens me, but it's the only solution.

For the glibc wiki new account creation requires EditGroup and that requires talking
to the community and that solved all spam problems.

-- 
Cheers,
Carlos.